​

Audit Trail

​

Overview

14:32:01.234  🔴 DENY    research-agent-01  PII_DETECTED        gpt-4o    $0.008
14:31:58.102  🟢 ALLOW   writer-agent-01    —                   gpt-4o-mini $0.001
14:31:55.890  🟡 REPORT  coder-agent-01     INJECTION_SUSPECTED gpt-4o    $0.012
14:31:52.445  🟢 ALLOW   research-agent-01  —                   gpt-4o    $0.006
14:31:48.112  🔴 DENY    writer-agent-01    ROLE_TOOL_NOT_ALLOWED gpt-4o-mini $0.000

• Timestamp: Precise to milliseconds
• Action: ALLOW (green), DENY (red), SANITIZE (orange), REPORT (amber)
• Agent ID: Which agent produced the event
• Reason Codes: Why the decision was made (empty for ALLOW)
• Model: Which model was used
• Cost: Request cost

​

Filters

​

Event Type

​

Agent ID

• Type research to see all agents with “research” in their ID
• Type a full agent ID for exact match

​

Text Search

• Searches: agent ID, reason codes, model name, correlation ID
• Case-insensitive
• Supports partial matches

​

Time Range

• Last 1 hour
• Last 6 hours
• Last 24 hours
• Last 7 days
• Custom range (date picker)

​

Phase

• Pre-execution events only
• Post-execution events only
• Both (default)

​

Expandable Event Details

{
  "correlationId": "abc-123-def-456",
  "agentId": "research-agent-01",
  "sessionId": "session-xyz",
  "timestamp": 1718461921234,
  "phase": "pre",
  "action": "DENY",
  "riskScore": 85,
  "reasonCodes": ["PII_DETECTED", "SSN_PATTERN"],
  "stagesEvaluated": ["stage1"],
  "shortCircuited": true,
  "totalLatencyMs": 2.3,
  "model": "gpt-4o",
  "provider": "openai",
  "cost": 0.008,
  "findings": [
    { "type": "PII", "category": "ssn", "confidence": 0.94 }
  ]
}

​

Expanded View Actions

​

Navigate to Evidence

/evidence/{correlationId}

​

Event Types

​

Pagination

• Loads 50 events at a time
• Infinite scroll loads more as you scroll down
• Total event count shown at top: “Showing 50 of 12,345 events”
• Filters update the count in real-time

​

Real-Time Updates

• A “New events” banner appears at the top when new events arrive while scrolling
• Click the banner to jump to the top and see the latest events
• Auto-scroll mode (optional): automatically scrolls to show new events as they arrive

​

Export

​

Export Filtered Results

• Maximum 10,000 events per export
• Filename: audit-trail-{timestamp}.json
• Includes all event fields (not just the summary columns)

​

Performance

• Virtual scrolling (react-window) — only renders visible rows
• Server-side filtering — filters are applied at the API level, not in the browser
• Indexed queries — reason codes, agent ID, timestamp are indexed for fast lookups
• WebSocket for new events — no polling